Privacy Policy

Version 1.0 Effective Date: January 15, 2025

Introduction

This Privacy Policy explains how the TeachMetrics application (the "App"), a browser-based application (extension) by CPE.io LLC, a Georgia limited liability company, doing business as TeachMetrics, collects, uses, and protects your information. By using the App, you agree to this policy.

1. Data Collection and Processing

1.1 Data We Collect

TeachMetrics connects to your Teachable school using your Teachable API key. The following data is collected from your Teachable account and stored locally in your browser:

  • Student Information: Student names, email addresses, enrollment dates, and progress data from your Teachable school
  • Course Information: Course names, pricing, and structure
  • Transaction Data: Revenue, refunds, and payment information from your Teachable school
  • Enrollment Data: Course enrollments, completion rates, and progress percentages
  • Analytics Data: Aggregated metrics calculated from the above data

Important — Direct API Connection: When you sync data from Teachable, the connection is made directly between your browser and Teachable.com. TeachMetrics servers are not involved in this data transfer. Your Teachable data is stored locally in your browser, and your Teachable API key is stored securely in your browser's local storage and is never transmitted to our servers.

Note: If you enable real-time webhook updates, webhook event notifications (not your full Teachable data) are temporarily routed through our Supabase relay service. See section 1.3 for details.

1.2 How We Use Your Data

  • To provide analytics and insights about your Teachable school
  • To generate reports on student progress, revenue, and course performance
  • To process real-time webhook events for up-to-date analytics
  • To improve the App's features and performance

1.3 Real-Time Webhooks

When you enable real-time updates, Teachable webhook events (such as new enrollments, completions, and transactions) are routed through our Supabase relay service. These events are retained until synced to your browser, then automatically deleted within 24 hours. Your main Teachable data never passes through our servers—only webhook event notifications.

2. Data Storage and Security

2.1 Local-First Architecture

TeachMetrics uses a privacy-focused, local-first architecture:

  • Your Teachable data is stored locally in your browser using Chrome's local storage
  • Analytics are processed locally using DuckDB WASM (an in-browser database)
  • Your Teachable API key is encrypted and stored only in your browser
  • No Teachable data is transmitted to or stored on our servers

2.2 Third-Party Services

We use the following services to provide our functionality:

  • Teachable API: To fetch your school data (using your API key)
  • Hookdeck: Webhook routing and queuing service (receives webhooks from Teachable, forwards to Supabase)
  • Supabase: Webhook relay service for real-time updates (events retained until synced to your browser, then deleted within 24 hours)
  • Google Chrome: Browser local storage for data persistence

3. Data Processing and Subprocessors

Teachable API Sync

Data synced via the Teachable API flows directly between your browser and Teachable.com. No subprocessors are involved. This data is stored locally in your browser and never passes through TeachMetrics servers.

Webhook Events

If you enable real-time webhook updates, webhook event notifications are processed by the following subprocessors:

  • Hookdeck: Webhook routing and reliable delivery (no persistent storage)
  • Supabase: Webhook relay and temporary event storage (retained until synced, then deleted within 24 hours)

Local Storage

Google Chrome: Browser local storage APIs are used to persist your data locally.

Each subprocessor is bound by appropriate data protection agreements.

4. Your Rights

You have the right to:

  • Access your data: View all data stored in the App at any time
  • Export your data: Export your analytics data in various formats (CSV, JSON, DuckDB)
  • Delete your data: Clear all stored data from the App's settings, or uninstall the extension
  • Revoke API access: Remove your Teachable API key at any time

5. Data Retention

  • Local data: Stored in your browser as long as you use the App. Automatically deleted when you uninstall the extension.
  • Webhook events: Retained in Supabase until synced to your browser, then automatically deleted within 24 hours.
  • Your control: You can delete all local data at any time through the App's settings.

6. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by:

  • Updating the Policy Version
  • Updating the "Effective Date"
  • Posting a notice in the App

7. Contact Us

If you have any questions about this privacy policy, please contact us at:

CPE.io LLC
DBA TeachMetrics
1063 Sheridan Park NE
Atlanta, GA 30324

8. Compliance

This application extension is designed to comply with:

  • GDPR requirements
  • CCPA requirements
  • Other applicable privacy regulations

9. Data Processing Agreement (DPA)

We are committed to transparency in our data processing practices. The following Data Processing Agreement (DPA) applies to all users of the TeachMetrics App:

Data Processing Agreement (DPA) for TeachMetrics

Definitions

  • "App Data" means all data processed by TeachMetrics, including student information, course data, transaction records, and analytics.
  • "Applicable Data Protection Laws" means all laws and regulations relating to the processing and protection of personal data, including GDPR and CCPA.
  • "Services" means the TeachMetrics App and related webhook relay services.

Data Processing Details

  • Subject Matter: Processing of Teachable school data for the purpose of providing analytics services.
  • Duration: For as long as the user utilizes the App and Services.
  • Nature and Purpose: To provide analytics, reporting, and insights for Teachable school owners.
  • Types of Data Processed: Student information, course data, enrollment records, transaction data, and derived analytics.
  • Categories of Data Subjects: Teachable school owners (App users) and their students (data subjects in Teachable).

Technical and Organizational Measures

  • Data is stored locally in the browser using Chrome's secure storage APIs.
  • Analytics are processed locally using DuckDB WASM (in-browser database).
  • API keys are stored securely in encrypted local storage.
  • Webhook events are transmitted over HTTPS and stored temporarily with automatic deletion.

Subprocessors

Subprocessors are limited to Hookdeck (webhook routing, no persistent storage), Supabase (webhook relay, events retained until synced then deleted within 24 hours), and Google (Chrome browser storage). Each subprocessor is bound by appropriate data protection agreements.

Data Subject Rights

Users may access, export, or delete their data at any time via the App. For data subject requests from students in your Teachable school, please handle these through Teachable directly.

Data Breach Notification

In the event of a data breach affecting our webhook relay service, users will be notified promptly in accordance with applicable laws via email, notices in the App, and on our website.

Data Transfers

TeachMetrics is available globally via the Chrome Web Store. Your Teachable data remains in your browser and is not transferred to our servers. Webhook events may be processed through Supabase's infrastructure with appropriate safeguards in place.

Data Retention

Local data is retained as long as the user utilizes the App. Webhook events are retained until synced to the user's browser, then automatically deleted within 24 hours. Users may delete their local data at any time.

Termination

Upon termination of services, users may export their data and then uninstall the App. All local data will be automatically cleared by the browser upon uninstallation. Because your data is stored locally in your browser, we cannot retrieve or recover your data once the extension is uninstalled. Data deletion upon uninstallation is permanent and irrevocable.

Contact Information

For DPA inquiries, please contact us by email at or by mail at: CPE.io LLC, DBA TeachMetrics, 1063 Sheridan Park NE, Atlanta, GA 30324

Governing Law

This DPA is governed by the laws of the State of Georgia, USA.

Changes to DPA

This DPA may be updated. Users will be notified of significant changes.